Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/3e1f4d0f-677a-37fd-ba5e-7b0fd64cd3b4.roa
File:                     3e1f4d0f-677a-37fd-ba5e-7b0fd64cd3b4.roa (raw, json)
Hash identifier:          8in2fodhVI46cOOHrnmxoTBh4299HYo9B7F0QnN79dw=
Subject key identifier:   16:A3:67:31:86:58:A9:99:E2:56:03:36:98:24:93:C8:F4:77:48:FD
Certificate issuer:       /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d
Certificate serial:       010D0C9F4328584AAB265EDFAEA3FD8AF972CDE0
Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/3e1f4d0f-677a-37fd-ba5e-7b0fd64cd3b4.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     26512
IP address blocks:        162.221.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:5e:df:ae:a3:fd:8a:f9:72:cd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=9bf2d785-a2b2-479e-9fb5-c25699df964e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0b:2c:17:c7:6a:5d:99:ff:82:27:15:58:44:
                    d0:6a:a6:f3:f5:4c:9b:c1:18:c3:59:6e:07:c1:31:
                    86:98:0f:9d:1b:f2:29:0d:8f:cb:3a:b4:c1:5e:dc:
                    e9:f8:85:71:71:0a:ec:51:0f:cb:1b:81:9b:a0:ef:
                    a9:45:0d:07:2e:58:9e:10:08:83:c3:4f:7c:b6:32:
                    e5:bf:7a:1b:10:de:fe:e9:aa:04:40:d4:b1:dc:02:
                    ff:cb:50:f3:de:56:28:aa:99:4a:15:7e:6e:df:70:
                    ea:0f:33:4d:9e:e2:14:ff:f1:7c:b7:9b:eb:41:c6:
                    de:ff:6c:76:1b:7e:4a:e0:df:8a:fc:c5:4a:bc:1b:
                    bd:cb:c9:5e:db:f3:92:d7:de:4d:a5:eb:43:8e:17:
                    cc:e3:83:b9:be:6b:0b:61:74:64:a8:2f:9f:a7:9c:
                    a5:08:56:78:52:69:e1:79:0c:04:05:87:5a:10:e5:
                    73:f9:5c:7c:7a:47:9b:9e:14:7b:ef:5b:41:ed:11:
                    54:89:00:95:d4:c3:a9:1b:5e:3c:7e:a4:3e:98:03:
                    c7:bb:e9:27:80:7b:f1:63:3b:27:a0:1d:be:c3:4a:
                    ad:d5:67:61:03:4e:17:54:9d:7e:8f:19:86:06:72:
                    ef:cf:e6:21:51:70:87:5d:0c:32:17:69:7c:fe:47:
                    67:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A3:67:31:86:58:A9:99:E2:56:03:36:98:24:93:C8:F4:77:48:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/3e1f4d0f-677a-37fd-ba5e-7b0fd64cd3b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl

            X509v3 Authority Key Identifier:
                keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.221.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:34:8f:9b:17:01:52:cf:cd:98:38:ed:6d:f4:6f:bb:8f:9c:
         90:ac:26:32:0f:20:c1:fb:22:78:d2:11:e7:a3:48:03:ae:0a:
         ba:c8:3b:22:b4:e2:6f:b9:b9:23:79:75:ef:0d:df:d1:0c:cf:
         f6:3c:ae:57:07:99:29:0e:51:4b:af:6a:e9:48:b7:f0:e6:5d:
         79:1a:4d:4b:75:73:34:c0:b4:f7:e7:56:b7:77:e5:be:b4:5e:
         01:08:4f:64:14:a7:24:be:23:e8:74:06:87:65:41:7d:4a:4c:
         99:2d:e3:8a:ba:b4:64:c2:0f:08:53:0d:e5:01:32:08:93:71:
         7b:9f:7d:49:99:6d:8a:6f:16:19:0b:b4:2e:80:00:67:2d:9a:
         73:ef:fb:c1:af:b0:fe:a6:51:9f:57:fe:48:f8:30:29:42:9a:
         db:dc:e3:1c:97:1a:79:51:05:c7:45:d4:c7:9e:bb:28:ad:eb:
         a3:84:70:ed:17:0f:d6:84:65:59:44:f0:62:19:94:a3:f0:b1:
         eb:6d:04:27:89:2e:ac:94:35:f7:5a:8d:e9:4b:fd:e1:86:f5:
         06:9a:1b:7e:0f:42:9a:9b:9c:d5:3f:c1:af:ef:4a:97:eb:9f:
         87:a6:d4:05:46:e1:f0:41:b1:dd:dc:bd:9e:cc:fd:f1:a3:dc:
         db:81:f3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:10:54 2025 by rpki-client